ben.carrasco/prowler
1
0
Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-07-24 13:01:56 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(kubernetes): solve TypeError in Core NetRaw check (#4075)

Browse Source
This commit is contained in:
Sergio Garcia
2024-05-23 10:37:57 -04:00
committed by GitHub
parent a591f07bdf
commit eb7f56f512
1 changed files with 9 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
prowler/providers/kubernetes/services/core/core_minimize_net_raw_capability_admission/core_minimize_net_raw_capability_admission.py
+9 -6
View File
@@ -13,12 +13,15 @@ class core_minimize_net_raw_capability_admission(Check):
report.status = "PASS"
report.status_extended = f"Pod {pod.name} does not have NET_RAW capability."
for container in pod.containers.values():
if "NET_RAW" in getattr(
getattr(container.security_context, "capabilities", None), "add", []
):
report.status = "FAIL"
report.status_extended = f"Pod {pod.name} has NET_RAW capability in container {container.name}."
break
security_context = getattr(container, "security_context", None)
if security_context:
capabilities = getattr(security_context, "capabilities", None)
if capabilities:
add_capabilities = getattr(capabilities, "add", [])
if "NET_RAW" in add_capabilities:
report.status = "FAIL"
report.status_extended = f"Pod {pod.name} has NET_RAW capability in container {container.name}."
break
findings.append(report)